Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json)
Hash identifier: FrtL1y1HJL/Mpu4G1c/DsVDkOkJxuErqV1KnUh1+6/I=
Subject key identifier: 85:B0:D4:FE:2F:B8:88:A2:03:33:7F:AE:81:5F:43:B3:CE:92:F5:76
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial: 019653803E78CD67D7737FD9B04EE44A7C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
Manifest number: 0A0C
Signing time: Sun 20 Apr 2025 14:00:35 +0000
Manifest this update: Sun 20 Apr 2025 14:00:35 +0000
Manifest next update: Mon 21 Apr 2025 14:00:35 +0000
Files and hashes: 1: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: 4PqWtHvTayTMfQ5WEji3/s2KczhotL6WSIE5cUCyNfc=)
2: dWBxYutd_7kq_EDB_JG4WIKLpyo.roa (hash: xSMt2hTKh36QhaSaerON9NeweGqlZocu9OE/cvG7CnM=)
3: sRhEXZaGwXqtptay-RphiAgSVt4.roa (hash: Ig5fF+EKhddnEzfin5M+0IE9DvCIWQxASy6NfoLnblk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:80:3e:78:cd:67:d7:73:7f:d9:b0:4e:e4:4a:7c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
Validity
Not Before: Apr 20 14:00:35 2025 GMT
Not After : Apr 21 14:00:35 2025 GMT
Subject: CN=85b0d4fe2fb888a203337fae815f43b3ce92f576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ad:c3:23:5b:27:ea:95:b5:33:d1:ba:be:34:
25:3e:13:21:dd:0f:59:91:24:47:52:c8:68:9f:a2:
41:b5:fd:f7:9a:de:d8:33:96:83:55:9e:81:b1:26:
d6:c7:76:65:d7:81:c1:3e:b4:05:68:14:8d:53:d4:
61:a3:a3:6e:80:14:af:08:88:67:7f:aa:8e:da:92:
49:d6:db:2b:6c:57:9c:5f:40:78:4d:22:57:35:db:
5c:61:3d:97:b6:be:c7:a1:69:8b:c2:57:87:f3:a5:
be:9d:67:f7:f5:e2:d6:d8:b4:b8:6f:1b:05:f2:d2:
45:e2:8e:d2:d0:66:81:e9:a1:4c:dc:6f:82:67:9f:
35:86:a2:27:db:b9:32:26:b3:63:cb:42:c5:d3:b8:
6a:4f:11:d4:fd:6e:53:a4:13:6b:11:93:da:82:f3:
1f:aa:18:5c:47:21:12:f0:be:9e:b8:06:6e:6d:f9:
c0:5a:27:ae:19:b2:90:2a:9f:b3:80:13:be:cd:23:
e2:41:72:20:96:d7:d7:dc:ac:85:5d:b3:12:99:bf:
94:19:53:db:40:93:03:9b:d7:e0:45:e4:0e:4e:0d:
53:79:e7:57:b6:c5:09:87:95:99:db:bb:c8:b4:50:
ed:1d:60:a2:e3:75:a7:83:e2:af:40:0d:c0:b5:81:
28:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B0:D4:FE:2F:B8:88:A2:03:33:7F:AE:81:5F:43:B3:CE:92:F5:76
X509v3 Authority Key Identifier:
keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:65:c1:e5:ee:45:d9:2b:3e:62:eb:db:ae:11:14:7f:f9:91:
aa:69:63:04:8a:55:98:f6:4b:8e:0d:4b:c5:38:36:b0:95:ba:
44:37:cc:c2:a5:a4:60:98:c4:4e:06:d1:12:8a:73:72:f4:15:
d0:7f:7a:20:4f:09:fa:7b:db:11:ae:9c:28:d1:22:6c:3a:dd:
d4:73:cc:68:46:a1:be:13:4e:f5:42:92:7e:18:aa:45:92:5a:
1c:64:72:04:51:e6:45:2f:a8:d1:9d:ce:05:ff:23:06:4b:c1:
66:67:18:4e:4a:7f:05:d3:76:64:bc:39:73:6f:4e:24:f5:38:
13:0f:cf:92:00:cb:cf:b2:eb:16:9b:5d:25:5e:54:b9:98:a8:
b0:dc:fc:df:cc:59:c2:34:0d:60:9a:d8:3b:2c:a5:36:a3:f0:
22:b4:01:10:b5:06:9a:65:bd:2b:8f:51:e9:ba:a4:ad:c5:71:
3b:42:e7:66:3a:0a:aa:15:5b:f7:b8:58:33:c4:9e:86:87:8f:
6b:53:ee:a7:1f:70:21:4d:b2:49:c9:d9:27:77:93:07:37:bf:
db:97:55:b3:41:f2:13:d8:3b:e5:17:2b:56:25:be:2d:cb:d0:
d7:21:75:51:90:ca:c2:73:22:0d:22:1d:76:1a:3e:79:eb:da:
f4:cf:9d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:03:39 2025 by rpki-client